# Head of Security

**Company:** [Protege](https://hotfix.jobs/companies/protege)
**Location:** Remote
**Role:** Security Engineering
**Experience:** 8+ years
**Skills:** SOC 2, ISO 27001, HIPAA, AWS, GCP, Azure, CI/CD, Threat Modeling, Incident Response, Identity/Access Management, Data Protection, Cloud Security, Data Pipelines, Supply Chain Security
**Posted:** 2026-04-28

> Leads end-to-end security strategy, architecture, operations, and culture for AI training data platform. Builds compliance programs (SOC 2, HIPAA), secures data pipelines, conducts technical reviews, and fosters security-aware culture. Requires 8+ years security experience with 2+ in leadership.

## Job Description

## What You’ll Do

### Mature the Security & Compliance Program
- Audit and improve the existing security program by identifying gaps, prioritizing improvements, and bringing more structure to what exists.
- Formalize security policies and frameworks appropriate for our stage
- Own and evolve our compliance posture. We have SOC 2 Type II in place and you'll maintain it, improve our controls, and provide automation wherever needed
- Ensure compliance with HIPAA and other healthcare data regulations, and build a robust PHI protection program

### Protect the Data Pipeline
- Secure the end-to-end lifecycle of training data which includes ingestion, processing, storage, preparation, and delivery
- Partner with engineering to embed security into **CI/CD pipelines**, **cloud infrastructure**, and **data workflows**

### Be Technical and Hands-On
- Conduct **threat modeling**, **architecture reviews**, and **code-level security assessments**
- Lead **incident response** when things go wrong
- Evaluate and deploy **security tooling**

### Enable the Business
- Translate security risks into business language for the executive team and board
- Serve as the security face to customers, fielding security questionnaires, supporting sales cycles, and building trust with AI company partners and customers
- Build a security-aware culture across the company through training and lightweight processes that don't slow teams down

### Scale the Function
- Decide what to build, what to buy, and what to outsource
- Set the roadmap for how security evolves from Series A through a rapid growth stage

## What You Bring

### Must Haves
- 8+ years in security roles, with at least 2 years in a leadership capacity
- Deep technical foundation: you've worked as or alongside engineers and can credibly review architecture, infrastructure, and code
- Experience building or significantly maturing a security program at an early-stage or high-growth company (not just maintaining one at a large enterprise)
- Strong understanding of **cloud security** (**AWS**, **GCP**, or **Azure**), **identity/access management**, and **data protection** at scale
- Hands-on experience with compliance frameworks (**SOC 2**, **ISO 27001**). You’ve maintained certifications and know how to expand scope without over-engineering the problem
- Hands-on experience with **HIPAA** compliance
- Comfort operating as an individual contributor and a leader simultaneously

### Nice to Haves
- Experience securing **data pipelines** or working with data-intensive platforms
- Experience working in a data infrastructure company
- Background in **AI/ML** or companies selling to technical buyers
- Experience with **data provenance**, **lineage tracking**, or **data governance** in ML contexts
- Familiarity with **supply chain security**
- Prior experience as a customer-facing security leader

## Similar roles

- [Director, Information Security & Technology](https://hotfix.jobs/jobs/206a3607-4d09-42a8-8ff7-ff8d9b3096f3) - GameChanger - Remote - $220k – $240k/yr
- [Head of Security & Compliance](https://hotfix.jobs/jobs/0c31140a-05ba-40ab-a5aa-12713d69cde4) - Casca - San Francisco, CA - $200k – $255k/yr
- [Head of Security Engineering](https://hotfix.jobs/jobs/367726a8-59a8-46f7-b624-833e1365c048) - Harvey - San Francisco, CA - $285k – $350k/yr
- [Head of IT & Information Security](https://hotfix.jobs/jobs/f30c568f-e311-4782-97f6-8ec02f856c13) - Fable Security - Remote - $160k – $225k/yr
- [Privacy Engineering Director](https://hotfix.jobs/jobs/7a45a3ca-90d8-4d75-bac1-d9537bd8a64f) - DuckDuckGo - Remote - $244k – $244k/yr

**Apply:** https://hotfix.jobs/jobs/fd3beab4-8970-45ee-aa06-e2ef648784c6
**Canonical:** https://hotfix.jobs/jobs/fd3beab4-8970-45ee-aa06-e2ef648784c6